Privacy policy

1. Who is responsible for your data

The controller of personal data collected through this site is PROCON Bartosz Miszkiewicz, ul. Bursztynowa 11, 05-850 Strzykuły, Poland, tax number (NIP) 5222471754, statistical number (REGON) 142665560. For anything concerning your data, write to bartosz@miszkiewicz.pro.

I have not appointed a data protection officer. The scale and nature of this processing do not require one, and I handle data matters personally.

2. What data I collect

I collect only what I need to answer your message and keep the site running. I do not buy data, obtain it from other sources or build marketing lists.

• Contact form: your name, e-mail address, company name (optional) and whatever you write in the field describing your situation. How much you say about yourself is entirely your choice.
• Correspondence: if you write to the e-mail address or reply to a message of mine, I process the content of that exchange and the address it came from.
• Server logs: the hosting provider records technical details of every request to the site, including IP address, time, browser type and the page requested. They serve maintenance and security.
• Visit statistics: aggregated figures that do not identify an individual — page views, country, device type, referring source.

3. Why, and on what legal basis

• Answering your enquiry and the correspondence that follows — Article 6(1)(b) GDPR (steps prior to entering a contract, where you write about working together) or Article 6(1)(f) GDPR (my legitimate interest in conducting business correspondence).
• Running the site, keeping it secure and protecting it from abuse, including the mechanism that filters automated spam out of the form — Article 6(1)(f) GDPR.
• Visit statistics — Article 6(1)(f) GDPR, with data aggregated so that it cannot identify you.
• Establishing or defending legal claims, should the need arise — Article 6(1)(f) GDPR.

4. Do you have to provide data

Providing data is voluntary. Without a name, an e-mail address and a description of your situation the form will not send, because without them I have no way to reply. The company field is optional.

If you would rather not use the form, write directly to the e-mail address below.

5. Who receives the data

I do not sell data and I do not share it for marketing. It reaches only the providers that technically operate this site and my correspondence:

• Vercel Inc. (USA) — site hosting and server logs. Vercel participates in the EU-US Data Privacy Framework.
• Resend (USA) — delivery of contact form submissions. Resend participates in the EU-US Data Privacy Framework.
• Microsoft — the Microsoft 365 service running the mailbox that receives those messages.
• Authorities entitled under law, should they make a binding request.

6. Transfers outside the European Economic Area

A form submission passes through the site's hosting and the delivery provider, and then reaches a mailbox running on Microsoft 365. All of these providers belong to US groups, so the data does leave the European Economic Area.

Vercel, Resend and Microsoft appear on the list of EU-US Data Privacy Framework participants, a mechanism the European Commission recognises as providing an adequate level of protection.

If your matter is confidential, write directly to the e-mail address rather than using the form. Whichever route you choose, do not put trade secrets, financial details or people's names in a first message. That message only needs to arrange a conversation; the substance belongs in the conversation itself.

7. How long I keep data

• Correspondence that does not lead to working together: up to 12 months from the last message, unless you ask me to delete it sooner.
• Correspondence connected to an engagement: for the duration of that engagement and the limitation period for any claims; accounting documents for as long as tax law requires.
• Server logs and visit statistics: according to the retention periods applied by the providers of those services.

8. Your rights

In relation to your data you have the right to:

• access your data and obtain a copy of it,
• have inaccurate data corrected and incomplete data completed,
• have your data erased,
• restrict processing,
• data portability, to the extent I process data on the basis of a contract,
• object to processing based on my legitimate interest, on grounds relating to your particular situation.

9. Complaint to the supervisory authority

If you believe I am processing your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland. I would be grateful if you wrote to me first — most matters can be settled straight away.

10. Cookies

This site uses no cookies for tracking, profiling or advertising. Visit statistics are collected in aggregate, without identifiers that would recognise you on a later visit. That is why you will not see a cookie consent banner here — there is nothing to consent to.

11. No profiling or automated decisions

I do not profile visitors and I take no automated decisions about anyone, including any that would produce legal effects or similarly significantly affect a person's situation.

12. Changes to this policy

If I change how data is processed, or change the providers running the site, I will update this document and the date at the top. Earlier versions are available on request.